pomalý browser, vyskakují reklamy

[nemis]

Ahoj Ahoj koumáci, prosil bych o radu, už jsem z toho neštastnej, mám relativně nový notas a asi tam mam nejaky marast stazeny, protoze se mi seka prohlizec, vyskakuji reklamy a tak, asi klasika, videl jsem tu vic uz takovych pripadu, tak jsem podle toho stahnul AdwCleaner, provedl scan a cleaning, probém přetrvává, nevím už co s tim, dííky moc za radu, zde je vysledek:

# AdwCleaner v5.009 - Logfile created 29/09/2015 at 01:26:11
# Updated 27/09/2015 by Xplode
# Database : 2015-09-27.1 [Server]
# Operating system : Windows 8 Pro (x64)
# Username : PC - DELL
# Running from : C:\Users\PC\Desktop\adwcleaner_5.009.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork
[-] Folder Deleted : C:\Program Files (x86)\DNS Unlocker
[-] Folder Deleted : C:\Program Files (x86)\myfree codec
[-] Folder Deleted : C:\Program Files (x86)\CouponXplorer
[!] Folder Not Deleted : C:\Program Files (x86)\CouponXplorer
[-] Folder Deleted : C:\ProgramData\apn
[-] Folder Deleted : C:\ProgramData\AskPartnerNetwork
[-] Folder Deleted : C:\ProgramData\17738841192774690908
[-] Folder Deleted : C:\ProgramData\{54bfb98f-8595-5157-54bf-fb98f859e63e}
[-] Folder Deleted : C:\ProgramData\{82b47cef-3354-38a6-82b4-47cef335f3bc}
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
[-] Folder Deleted : C:\Users\PC\AppData\Local\AskPartnerNetwork
[-] Folder Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgdcgnnjenhecpdnhpnhpmgndjenmnnk
[-] Folder Deleted : C:\Users\PC\AppData\Local\Temp\apn

***** [ Files ] *****

[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.metrolyrics.com_0.localstorage
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.metrolyrics.com_0.localstorage-journal
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
[-] File Deleted : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal

***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Bidaily Synchronize Task[973b]

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaahlfahldnilidgnlikdckbfehhca
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaahaeginbdcckocjkhbciadcafnep
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf
[-] Key Deleted : HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaahaeginbdcckocjkhbciadcafnep
[-] Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaahaeginbdcckocjkhbciadcafnep
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf
[-] Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaahlfahldnilidgnlikdckbfehhca
[-] Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaahlfahldnilidgnlikdckbfehhca
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Key Deleted : HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Key Deleted : HKCU\Software\AskPartnerNetwork
[-] Key Deleted : HKCU\Software\Myfree Codec
[-] Key Deleted : HKCU\Software\WEBAPP
[-] Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
[-] Key Deleted : HKLM\SOFTWARE\Myfree Codec
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E1527582-8509-4011-B922-29E3FB548882}_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C2201}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5354-2D53-5045-A758B70C1C01}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C5CA91B2-6518-8029-1AC2-E73D213FE1B5}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C5CA91B2-6518-8029-1AC2-E73D213FE1B5}
[-] Key Deleted : [x64] HKCU\Software\AskPartnerNetwork
[!] Key Not Deleted : [x64] HKCU\Software\Myfree Codec
[-] Key Deleted : [x64] HKCU\Software\WEBAPP
[-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\D2A425F405350054677A7A857BC02210
[-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC02210
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC02210
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

***** [ Web browsers ] *****

[-] [C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : aaaaahaeginbdcckocjkhbciadcafnep
[-] [C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : aaaaahlfahldnilidgnlikdckbfehhca
[-] [C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : aaaaaiabcopkplhgaedhbloeejhhankf
[-] [C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : mgdcgnnjenhecpdnhpnhpmgndjenmnnk

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [7163 bytes] ##########

[JaRon]

ahoj
pouzi zoek citat Rudy http://forum.viry.cz/viewtopic.php?f=13 ... k#p1418025

[nemis]

dík moc, provedl jsem, zde je dalsi vysledek nejsem si uplně jistý, že už je po problému, stále se mi to zdá zasekaný, nějaké další rady prosím prosím?

Díky


Zoek.exe v5.0.0.1 Updated 28-09-2015
Tool run by PC on Łt 29. 09. 2015 at 12:49:35,52.
Microsoft Windows 10 Pro 10.0.10240 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\PC\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-09-29-091946.log 1189 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"

==== Reset Google Chrome ======================

C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Default.migrated\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\PC\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\PC\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Default User\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\PC\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\PC\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=0 folders=0 0 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\PC\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on Łt 29. 09. 2015 at 12:52:57,34 ======================

[JaRon]

prescanuj PC s MBAM - log sem

[nemis]

Provedl jsem, porad mi tu vyskakuje ze to zablokovalo nejakou webovou stranku, takze v podstate ted je po problemu, ale nemel bych spise vymazat nejake ty soubory, ktere porad to vyskakovani zpusobuji? Dekuju mooc

zde je 1. log, doufam, ze spravny, nize vlozim i druhy, nevim roc mi to udelalo 2

<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2015/10/08 14:26:27 +0200</date>
<logfile>mbam-log-2015-10-08 (14-26-25).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.1.8.1057</version>
<malware-database>v2015.10.08.03</malware-database>
<rootkit-database>v2015.10.06.01</rootkit-database>
<license>trial</license>
<file-protection>enabled</file-protection>
<web-protection>enabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 10</osversion>
<arch>x64</arch>
<username>PC</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>402945</objects>
<time>2189</time>
<processes>0</processes>
<modules>0</modules>
<keys>0</keys>
<values>0</values>
<datas>0</datas>
<folders>0</folders>
<files>0</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
</items>
</mbam-log>



ZDE JE DRUHY



<?xml version="1.0" encoding="UTF-8" ?>
<logs>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T14:30:13.971518+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="d7b3ee9f-3273-407f-aa8c-244f63b6aeab" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="51024"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T14:30:14.138636+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="28cd595d-fb96-4ad5-878d-77dc8bc23d54" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="51024"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T14:30:14.215193+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="59610c9b-b683-4679-a6ec-0e9a1cb7931e" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="51025"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T14:30:14.275236+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="2e172158-bd80-458f-a140-f48960b88ee1" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="51026"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T14:30:14.332276+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="cc66413e-71b6-47a2-80b0-cb599623a5a1" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="51027"></record>
<record severity="debug" scantype="threat" LoggingEventType="6" starttime="2015-10-08T14:26:27+02:00" datetime="2015-10-08T15:02:57.642437+02:00" source="Manual" type="Scan" username="SYSTEM" systemname="DELL" last_modified_tag="904bd2ff-0f0b-41aa-b96d-91b6fd0afb39" duration="2189" malwaredetections="0" nonmalwaredetections="0" scanresult="completed"></record>
<record severity="debug" LoggingEventType="1" datetime="2015-10-08T15:08:57.172239+02:00" code="Unable to access update server" source="Scheduler" message="Failed" type="Update" username="SYSTEM" systemname="DELL" last_modified_tag="fe4e3652-04e2-45d1-a1b1-df33d57897ea"></record>
<record severity="debug" LoggingEventType="2" datetime="2015-10-08T15:30:14.505593+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="DELL" last_modified_tag="3292ef8f-27f0-43e4-81a7-6587b05b1f48" result="Starting" subtype="Malware Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2015-10-08T15:30:14.505593+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="DELL" last_modified_tag="c6713a40-4c61-4a2c-9347-c434fccc4eb5" result="Started" subtype="Malware Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2015-10-08T15:30:14.568094+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="DELL" last_modified_tag="bfc56a41-a252-4b42-8a80-e646824e4b35" result="Starting" subtype="Malicious Website Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2015-10-08T15:30:15.255602+02:00" source="Protection" type="Protection" username="SYSTEM" systemname="DELL" last_modified_tag="6fb56445-d8f0-4645-b8b0-0519fcad93cb" result="Started" subtype="Malicious Website Protection"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:30:41.515584+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="a2d30636-d39b-46f3-b358-ccc20c169ea7" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49489"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:30:41.651681+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="d5405e2c-36dd-475e-b472-1846ac2ae704" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49489"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:30:41.905861+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="ff3aa5fc-e86b-44ca-ba55-38a9c1f8d45c" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49490"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:30:41.957898+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="e1a7e072-35cf-459b-be97-5214e60adb93" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49491"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:30:42.008934+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="fa23c768-3d54-4530-88a1-9966b06fce77" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49494"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:37:19.673648+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="a00cc60d-a712-48ff-a00b-4783a0ebb871" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49831"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:37:19.712675+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="a13d9cda-1749-43bb-a1bd-42e343a29f6d" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49832"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:37:19.758707+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="67f57a1a-1bef-454d-9c5b-82bb477bdd41" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49833"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:37:30.532635+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="86a9e9e6-de50-4cbe-b2b9-0d3ea7338302" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49844"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:40:23.076564+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="f98c0309-2def-4e25-a38e-1010c873a7ff" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49911"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:40:26.501519+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="90375006-d8fd-4951-9005-042142483a67" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49915"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:40:29.698824+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="a330147d-d528-487c-88b1-b9b852b20dc5" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49921"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:40:33.286623+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="06323c16-d7c2-4690-8a30-28950851b328" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49923"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:40:36.921038+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="906c86aa-1171-40f6-bc30-34243a9f1222" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49925"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:40:49.642672+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="62f7e780-6f64-43a2-9902-64e55ca86655" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49929"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:40:54.701478+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="ed549830-7484-4038-bfae-bdff5ea1b6b7" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49936"></record>
<record severity="debug" process="C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe" LoggingEventType="0" datetime="2015-10-08T15:40:59.044112+02:00" source="Protection" type="Detection" username="SYSTEM" systemname="DELL" last_modified_tag="e53e8a8c-37ff-4afb-8572-a25d31728315" subtype="Malicious Website Protection" direction="Outbound" domain="m53.dnsqa.me" ip="127.42.0.0" malwaretype="Domain" port="49948"></record>
</logs>

[JaRon]

este pouzi JRT - citat:
Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

[Rudy]

Log MBAM vypadá takto: http://forum.viry.cz/viewtopic.php?f=13 ... 5#p1418858 .

[nemis]

Projel jsem to tedy tím JRT, zde log, díky za další rady:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows 10 Pro x64
Ran by PC on po 12. 10. 2015 at 1:53:08,08
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Users\PC\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage
Successfully deleted: [File] C:\Users\PC\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage-journal



~~~ Folders



~~~ Chrome


[C:\Users\PC\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\PC\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\PC\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\PC\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 12. 10. 2015 at 1:57:16,28
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[JaRon]

v akom stave je pocitac

[nemis]

Tyjo vypadá to skoro i že je po problémech, zatím v poho Moc díky, i podle logu už by to mělo být ok?

[JaRon]

citat:
•Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdown ... x/•Oznacte jen moznost "Remove disinfection tools"
•kliknete na Run

a mame hotovo

Lock